session

type AccessTokenSessionManager ManagementService

type AccessTokenSessionResolver Resolver

type Attrs struct {
	UserID string                          `json:"user_id"`
	Claims map[model.ClaimName]interface{} `json:"claims"`
}

type CookieDef struct {
	Def               *httputil.CookieDef
	SameSiteStrictDef *httputil.CookieDef
}

type CookieManager interface {
	GetCookie(r *http.Request, def *httputil.CookieDef) (*http.Cookie, error)
	ClearCookie(def *httputil.CookieDef) *http.Cookie
}

type CreateReason string

type EventService interface {
	DispatchEventOnCommit(payload event.Payload) error
}

type IDPSessionManager ManagementService

type IDPSessionResolver Resolver

type ManagementService interface {
	ClearCookie() []*http.Cookie
	Get(id string) (Session, error)
	Delete(Session) error
	List(userID string) ([]Session, error)
	TerminateAllExcept(userID string, currentSession Session) ([]Session, error)
}

type Manager struct {
	IDPSessions         IDPSessionManager
	AccessTokenSessions AccessTokenSessionManager
	Events              EventService
}

type MeterService interface {
	TrackActiveUser(userID string) error
}

type Middleware struct {
	SessionCookie              CookieDef
	Cookies                    CookieManager
	IDPSessionResolver         IDPSessionResolver
	AccessTokenSessionResolver AccessTokenSessionResolver
	AccessEvents               *access.EventProvider
	Users                      UserQuery
	Database                   *appdb.Handle
	Logger                     MiddlewareLogger
	MeterService               MeterService
	IDPSessionOnly             bool
}

type MiddlewareLogger struct{ *log.Logger }

type Resolver interface {
	Resolve(rw http.ResponseWriter, r *http.Request) (Session, error)
}

type Session interface {
	SessionID() string
	SessionType() Type

	GetClientID() string
	GetCreatedAt() time.Time
	GetAccessInfo() *access.Info
	GetDeviceInfo() (map[string]interface{}, bool)

	GetAuthenticationInfo() authenticationinfo.T

	ToAPIModel() *model.Session

	// SSOGroupIDPSessionID returns the IDP session id of the SSO group
	// if the session is not SSO enabled, SSOGroupIDPSessionID will be empty
	SSOGroupIDPSessionID() string
	// IsSameSSOGroup indicates whether the session is in the same SSO group
	IsSameSSOGroup(s Session) bool
	Equal(s Session) bool
}

type Type string

type UserQuery interface {
	Get(id string, role accesscontrol.Role) (*model.User, error)
	GetRaw(id string) (*user.User, error)
}